Senior Associate, Technology, Information Security, Privacy Risk

As a Senior Associate, Technology, Information Security & Privacy Risk, you will play a key role in providing Technology, Information Security and Privacy Risk management expertise globally for the Institutional Division. Partnering with Country Risk Owners, Material Risk Theme Owners, and Risk Centre of Excellence (COE) colleagues, you will identify and drive priority Non-Financial Risk (NFR) uplift initiatives, strengthen control and indicator environments, and oversee the effective implementation of risk improvement activities to ensure compliance with regulatory and policy requirements. Working across multiple countries, stakeholder groups, and strategic programs, you will contribute to embedding robust risk management practices, behaviours, and governance frameworks throughout the Division. Leveraging your understanding of both business operations and technology, you will translate complex technology, information security, and privacy risk matters into clear business insights, enabling effective risk ownership, informed decision-making and sustainable risk outcomes. Banking is changing and we’re changing with it, giving our people great opportunities to try new things, learn and grow. Whatever your role at ANZ, you’ll be building your future, while helping to build ours.

As a Senior Associate, Technology, Information Security & Privacy Risk, you will;

• Drive the consistent application of Technology, Information Security and Privacy Risk frameworks across the Division.

• Partner with business and technology stakeholders to identify, assess and manage key risk themes including Technology Outage, Data Loss, Cyber, Privacy and Ethical Data Use.

• Provide practical guidance on regulatory obligations, industry requirements and Group risk frameworks.

• Support and coordinate technology, information security and privacy risk assessments, impact assessments and thematic reviews.

• Ensure risks and controls are effectively embedded within business processes, customer journeys and change initiatives.

• Monitor the effectiveness of controls and recommend enhancements to strengthen the Division's risk and control environment.

• Identify emerging risks, control gaps and divisional risk hotspots, and support the development of mitigation strategies.

• Prepare risk insights, trend analysis and reporting for governance forums, committees and senior stakeholders.

• Advise on risk considerations relating to new products, services, systems, technology implementations and process changes.

• Collaborate with Risk, Legal, Data, Technology and business teams to drive consistent and pragmatic risk outcomes.

• Support the management and escalation of technology, information security, and privacy-related incidents and risk events.

• Promote a strong risk culture by building stakeholder awareness, strengthening Line 1 accountability and embedding effective risk management practices across the Division.

To grow and be successful in this role, you will ideally bring the following:

• Demonstrated experience in Non-Financial Risk (NFR) management, including risk assessments, control design, issue management and risk governance.

• Strong understanding of Technology, Information Security and  Privacy risks, controls and frameworks.

• Experience supporting privacy impact assessments, technology and information security risk reviews, data event responses, or similar control-based assessments.

• Ability to interpret and apply regulatory, legal and policy requirements within technology, data and operational environments.

• Knowledge of privacy governance, technology risk and information security control environments.

• Experience supporting regulatory change, policy implementation and risk uplift initiatives within complex and regulated organisations.

• Proven ability to translate complex technical, risk and regulatory requirements into practical and actionable business guidance.

• Strong stakeholder management and influencing skills, with the ability to collaborate effectively across business, technology, legal, compliance and risk teams.

• A pragmatic, risk-based mindset with the ability to balance regulatory obligations, customer outcomes and business objectives.

• Strong analytical, problem-solving and communication skills, with the ability to identify emerging risks and recommend effective solutions.

• High levels of accountability, attention to detail and a commitment to delivering quality outcomes in a fast-paced environment.

• Tertiary qualifications in Risk Management, Technology, Information Security, Privacyor a related discipline, with certifications such as CRISC, CISA, CISM or Privacy Practitioner highly regarded.

You’re not expected to have 100% of these skills. At ANZ a growth mindset is at the heart of our culture, so if you have most of these things in your toolbox, we’d love to hear from you.

To find out more about working at ANZ, visit https://www.anz.com.au/careers. You can apply for this role by visiting ANZ Careers and searching for reference number 120635.